Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/715585-c8db-46fd-b8f2-b405585e73b7/1/X28PillgXVekESGPrIoCm7Bqu2U.mft
File: X28PillgXVekESGPrIoCm7Bqu2U.mft (raw, json)
Hash identifier: Xf5W43Mxr5a96upQz+fUjuufdoi9wGqFTB34YXS917Q=
Subject key identifier: 37:0F:9B:C8:6E:C5:65:B9:72:C7:9C:68:48:8D:99:84:C5:77:11:91
Authority key identifier: 5F:6F:0F:8A:59:60:5D:57:A4:11:21:8F:AC:8A:02:9B:B0:6A:BB:65
Certificate issuer: /CN=5f6f0f8a59605d57a411218fac8a029bb06abb65
Certificate serial: 0193D2C6D17F1CDF1BC356383306C264FFE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X28PillgXVekESGPrIoCm7Bqu2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/715585-c8db-46fd-b8f2-b405585e73b7/1/X28PillgXVekESGPrIoCm7Bqu2U.mft
Manifest number: 0CB5
Signing time: Tue 17 Dec 2024 04:01:05 +0000
Manifest this update: Tue 17 Dec 2024 04:01:05 +0000
Manifest next update: Wed 18 Dec 2024 04:01:05 +0000
Files and hashes: 1: AQCIaa4KXvCj57W9qYTDdrsRJF0.roa (hash: S6FCqTR4KeyBxYNYkPN5cWhhEGUYO6NvzNwoj1suSWA=)
2: X28PillgXVekESGPrIoCm7Bqu2U.crl (hash: r1a5Zximr9DthBQfaFeZi90kpFD3G6/UiR6uDvHtcGk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d2:c6:d1:7f:1c:df:1b:c3:56:38:33:06:c2:64:ff:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f6f0f8a59605d57a411218fac8a029bb06abb65
Validity
Not Before: Dec 17 04:01:05 2024 GMT
Not After : Dec 18 04:01:05 2024 GMT
Subject: CN=370f9bc86ec565b972c79c68488d9984c5771191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bb:8c:8e:19:aa:e7:df:b2:14:b4:3a:79:24:
a2:ed:03:0c:40:1a:44:97:82:ba:b9:c9:ef:7e:ba:
44:7b:6e:01:ca:ee:54:45:01:ad:80:3f:ff:af:84:
1b:a8:7f:b2:ec:48:6f:2a:40:39:27:13:f1:34:3c:
07:a1:d9:8f:2a:e5:55:ff:17:d0:a7:34:2f:c0:15:
ca:bc:1b:68:5a:59:34:c0:79:70:5d:7e:19:7f:8b:
3a:9c:1b:9e:cf:d8:49:92:6e:a5:6b:62:aa:c4:75:
e9:c7:0a:e5:40:2b:6c:b0:18:e7:65:a1:2d:8a:92:
ce:8d:f8:6d:a2:a4:32:26:07:d4:ce:8a:9e:9a:af:
a0:11:14:02:23:19:3a:57:57:4e:e0:be:b7:3b:51:
fb:fa:50:d9:ed:24:92:44:20:10:21:c7:eb:6b:48:
aa:31:bf:b8:d2:11:1f:ce:f5:5e:6d:ac:4a:09:59:
2f:ad:02:9a:08:eb:53:74:df:c7:79:43:2c:d0:1f:
b1:42:84:f0:3a:d8:1e:68:46:e4:88:3c:60:3d:3c:
4c:81:74:dd:34:40:31:69:8e:56:c1:a1:ac:af:19:
35:d2:80:33:f7:1f:64:65:ad:6f:2e:95:c8:56:d8:
1a:6f:41:2c:fc:1b:33:1f:c0:9f:e7:ac:43:46:17:
dc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:0F:9B:C8:6E:C5:65:B9:72:C7:9C:68:48:8D:99:84:C5:77:11:91
X509v3 Authority Key Identifier:
keyid:5F:6F:0F:8A:59:60:5D:57:A4:11:21:8F:AC:8A:02:9B:B0:6A:BB:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X28PillgXVekESGPrIoCm7Bqu2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/715585-c8db-46fd-b8f2-b405585e73b7/1/X28PillgXVekESGPrIoCm7Bqu2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/715585-c8db-46fd-b8f2-b405585e73b7/1/X28PillgXVekESGPrIoCm7Bqu2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:bb:c2:9f:cb:34:89:c1:ed:ba:17:73:3e:aa:2a:02:3d:46:
3d:44:3d:16:f1:da:d0:39:c3:f2:6a:aa:7e:46:ec:78:db:76:
a9:08:8c:2a:e0:1e:4c:cc:46:c4:00:f2:19:85:70:81:46:a3:
fe:ed:f7:13:ce:64:80:71:21:c4:09:7f:a1:1c:d0:66:61:7f:
82:85:9b:35:45:9c:20:75:18:3e:d5:9e:ad:4e:ae:0e:83:e5:
66:ef:9d:f6:35:30:b5:a1:ac:af:c8:62:05:1f:e3:a6:e6:5b:
00:88:fd:97:31:ab:76:a6:77:a3:9d:f3:58:ee:39:1f:48:ec:
c6:dc:dc:dc:ba:f5:bd:ea:8d:5d:a1:7d:a7:b4:c3:57:b5:55:
ad:3d:fc:f8:7c:65:c9:9e:19:e7:1d:4e:11:bd:d1:10:bc:23:
55:ef:d1:04:63:7a:e8:cc:8f:67:e2:3e:df:7d:a9:af:d2:82:
d4:33:9b:09:6e:08:c3:9d:21:97:b6:36:85:4b:50:07:63:5c:
0b:49:b4:f2:6e:8b:e8:a9:33:a3:c7:45:ff:28:06:df:bc:a3:
41:ef:53:f3:9e:4f:98:78:af:f7:d5:dc:c7:88:dd:eb:c5:20:
e8:5d:e3:41:16:d2:11:0d:ba:b0:e0:0d:45:72:a5:bd:b1:53:
b0:2a:7d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:32:11 2025 by rpki-client